Can we delegate “exclusive” administrator tasks?
Yes. Active Directory is extremely granular when referred to delegations.
We can delegate the task to manage:
- full partition
- certain kind of objects within a given partition
- attribute sets for an object
- specific attributes